Executive Summary

Informations
Name	MDVSA-2008:159	First vendor Publication	2008-07-30
Vendor	Mandriva	Last vendor Modification	2008-07-30
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A flaw was discovered in licq versions prior to 1.3.6 that allowed a remote attacker to cause a denial of service (crash) via a large number of connections (CVE-2008-1996). The updated packages have been patched to correct this issue.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2008:159

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-399	Resource Management Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Licq cpe:2.3:a:licq:licq:1.3.5:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.3.4:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.3.2_rc:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.3.0_pre:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.3.0:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.2.7:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.2.6:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.2.4:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.2.3:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.2:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:1.0:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.85:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.84b:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.84a:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.81:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.80:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.76:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75.3a:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75.3:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75.2:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75.1:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75_991219:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.75:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.71:*:*:*:*:*:*:* cpe:2.3:a:licq:licq:0.61:*:*:*:*:*:*:*	30

OpenVAS Exploits

Date	Description
2009-02-17	Name : Fedora Update for licq FEDORA-2008-3812 File : nvt/gb_fedora_2008_3812_licq_fc9.nasl
2009-02-17	Name : Fedora Update for licq FEDORA-2008-3909 File : nvt/gb_fedora_2008_3909_licq_fc7.nasl
2009-02-17	Name : Fedora Update for licq FEDORA-2008-3969 File : nvt/gb_fedora_2008_3969_licq_fc8.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
44757	licq Connection Saturation Remote DoS

Nessus® Vulnerability Scanner

Date	Description
2008-05-16	Name : The remote Fedora host is missing a security update. File : fedora_2008-3812.nasl - Type : ACT_GATHER_INFO
2008-05-16	Name : The remote Fedora host is missing a security update. File : fedora_2008-3909.nasl - Type : ACT_GATHER_INFO
2008-05-16	Name : The remote Fedora host is missing a security update. File : fedora_2008-3969.nasl - Type : ACT_GATHER_INFO